Article 24
Data protection and confidentiality Member States shall take all necessary measures to ensure that all data, including genetic information, collated within the scope of this Directive to which third parties have access have been rendered anonymous so that the donor is no longer identifiable. For that purpose, they shall ensure: (a) that data security measures are in place as well as safeguards against unauthorised data additions, deletions or modifications to donor files or deferral records, and transfer of information; (b) that procedures are in place to resolve data discrepancies; (c) that no unauthorised disclosure of such information occurs, whilst guaranteeing the traceability of donations. CHAPTER VIII EXCHANGE OF INFORMATION, REPORTS AND PENALTIES